[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-571461-105":3,"detail-sidebar-cat-1-en-105":73,"doc-detail-571461-en":118},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":66,"head_meta":68,"extra_data":70,"updated_unix":72},105,"en","defending-against-xss-csrf-and-clickjacking-security-research","Defending Against XSS, CSRF, and Clickjacking - Security Research","","Web users face multiple cyber threats when visiting websites, especially Cross-Site-Scripting (XSS), Cross-Site-Request-Forgery (CSRF), and Clickjacking. Server-side protection is approached through two primary defenses: input authentication and access control. The work outlines related background on XSS and CSRF, defines attack mechanisms, and targets building a website architecture that remains resistant to these threats through combined authentication and controlled access.",{"@graph":14,"@context":65},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/presentations/","Presentations",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/defending-against-xss-csrf-and-clickjacking-security-research/571461/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/defending-against-xss-csrf-and-clickjacking-security-research/571461.png","ImageObject",442,249,{"name":42,"@type":43},"Fans","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-19","2026-10-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",5,{"@type":57,"mainEntity":58},"FAQPage",[59],{"name":60,"@type":61,"acceptedAnswer":62},"How is CSRF defense motivated in the previous work section?","Question",{"text":63,"@type":64},"The previous work section states that the most effective CSRF defense is using a per-session nonce, generated at the start of a session and reused to ensure user authentication.","Answer","https://schema.org",{"og:url":32,"og:type":67,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":69,"canonical":32},"index,follow",{"doc_id":71,"site_id":7},571461,1792036237,{"code":4,"msg":74,"data":75},"success",[76,80,85,90,95,100,105,110,114],{"id":77,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":78,"slug":79},11,90,"presentations",{"id":81,"doc_module":22,"doc_module_name":25,"category_name":82,"show_sort_weight":83,"slug":84},12,"Resumes",80,"resumes",{"id":86,"doc_module":22,"doc_module_name":25,"category_name":87,"show_sort_weight":88,"slug":89},14,"Invoices",70,"invoices",{"id":91,"doc_module":22,"doc_module_name":25,"category_name":92,"show_sort_weight":93,"slug":94},15,"Posters",60,"posters",{"id":96,"doc_module":22,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},16,"Social Media",50,"social-media",{"id":101,"doc_module":22,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},17,"Forms",40,"forms",{"id":106,"doc_module":22,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},18,"Letters",30,"letters",{"id":111,"doc_module":22,"doc_module_name":25,"category_name":112,"show_sort_weight":55,"slug":113},21,"Paper Templates","papers-templates",{"id":115,"doc_module":22,"doc_module_name":25,"category_name":116,"show_sort_weight":4,"slug":117},158,"General","general-158",{"code":4,"msg":74,"data":119},{"doc_id":71,"user_id":120,"nickname":42,"user_avatar":121,"doc_module":22,"category_id":77,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":122,"file_id":123,"file_url":124,"file_type":125,"file_size":126,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":127,"language":128,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":129,"faqs":130,"seo_title":131,"seo_description":12,"update_tm":132,"read_time":133},5909892330395,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","Defending against XSS,CSRF, and Clickjacking  David Bishop  \n University of Tennessee Chattanooga  \nABSTRACT  \n Whenever a person visits a website, they are running the risk of falling prey to multiple  types of cyber attacks. Three of the most common cyber attacks are Cross-Site-  \n Scripting, Cross-Site-Request-Forgery, and Clickjacking. There are very few ways to  \n defend against all three of these types of attacks. Two of the main methods of defense  on the server side are input authentication and access control.  \nTable of Contents  \n1. Introduction ........................................................................................................................... 2  \n2. Previous Work ...................................................................................................................... 2  \n3. BACKGROUND........................................................................................................................ 3  \n3.1 XSS definition and attacks ........................................................................................................ 3  \n3.2 Cross-Site-Request-Forgery definition and attacks ........................................................ 5  \n4. PROJECT DEFINITION ......................................................................................................... 7  \n4.1 Motivation ............................................................................................................................ 7  \n5. METHODOLOGY .................................................................................................................... 9  \n5.1 Site description ............................................................................................................................ 9  \n5.2 XSS attacks and descriptions................................................................................................ 12  \n5.3 XSS effects.................................................................................................................................... 14  \n5.4 CSRF attacks and descriptions............................................................................................. 14  \n5.5 CSRF effects................................................................................................................................. 16  \n6. RESULTS ............................................................................................................................... 16  \n6.1 XSS attack results and defense ............................................................................................ 16  \n6.1.1 Unsecured Site Attack Results.......................................................................................... 16  \n6.1.2 Input Authentication Site Attack Results ..................................................................... 17  \n6.2 Cross-Site-Request-Forgery attack results and defense ............................................ 18  \n6.2.1 Unsecured Site Attack Results.......................................................................................... 18  \n6.2.2 Input Authenticated and Random Value Secured Site Attack Results............... 18  \n7. Conclusion ........................................................................................................................... 18  \n8. References .......................................................................................................................... 19  \n1. Introduction  \nWhenever a person visits a website, they are running the risk of falling prey to multiple types of cyber attacks. Three of the most common cyber attacks are Cross-Site-Scripting, Cross-Site-Request-Forgery, and Clickjacking. The goal of this project is to develop a website that is not susceptible to these three types of attacks, and therefore visitors don’t have to worry about them. The site will not be susceptible to these attacks through a combination of strong input authenti","cbCaiifVnj7h428O","https://ap.wps.com/l/cbCaiifVnj7h428O","pdf",732452,20,"English","# Introduction\n# Previous Work\n# Background\n## XSS definition and attacks\n## Cross-Site-Request-Forgery definition and attacks\n# Project Definition\n## Motivation\n# Methodology\n## Site description\n## XSS attacks and descriptions\n## XSS effects\n## CSRF attacks and descriptions\n## CSRF effects\n# Results\n## XSS attack results and defense\n## Cross-Site-Request-Forgery attack results and defense\n# Conclusion\n# References","[{\"question\":\"How is CSRF defense motivated in the previous work section?\",\"answer\":\"The previous work section states that the most effective CSRF defense is using a per-session nonce, generated at the start of a session and reused to ensure user authentication.\"}]","Defending Against XSS, CSRF, and Clickjacking - Security Research | PDF",1791918767,7]